Password stretching - a way to mitigate CPU flood

后端 未结 4 776
不思量自难忘°
不思量自难忘° 2021-01-06 06:25

I\'m now using password stretching for all user account passwords throughout all my websites. In the db I store an iteration count and randomly assigned salt along with the

4条回答
  •  独厮守ぢ
    2021-01-06 06:47

    Isn't the big benefit of password stretching, that the calculations are done on the client side and therefore they should not affect your server while still providing a good protection?
    Frankly, if you implemented it on your server, you are doing it wrong and missed the point :-)

提交回复
热议问题